hi Carlito, you can configure subinterfaces with tags and assign the ip addresses so the VPP does routing and then either use vnet ACLs or acl plugin to restrict the traffic.
—a > On 19 Apr 2018, at 21:07, Dave Barach <dbar...@cisco.com> wrote: > > Begin forwarded message: > >> From: Carlito Nueno <carlitonu...@gmail.com> >> Date: April 19, 2018 at 9:03:51 AM HST >> To: dbar...@cisco.com >> Subject: VLAN to VLAN >> >> Hi Dave, >> >> How can I enable VLAN to VLAN communication? I want to have devices on >> one VLAN talk to devices on another VLAN, if possible constrain the >> devices by MAC or IP address. >> >> For example, only device with MAC (aa:aa:bb:80:90) or IP address >> (192.168.2.20) on VLAN 100 can talk to devices on VLAN 200 >> (192.168.3.0/24). >> >> Thanks >